VMware ESXi TCP/IP Memory Corruption Remote Code Execution Vulnerability
July 28th, 2022
Vulnerability Details
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware ESXi. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the TCP/IP kernel module. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the kernel.
Additional Details
https://docs.vmware.com/en/VMware-vSphere/7.0/rn/vsphere-esxi-70u3f-release-notes.html
https://docs.vmware.com/en/VMware-vSphere/6.7/rn/esxi670-202206001.html
https://docs.vmware.com/en/VMware-vSphere/6.5/rn/esxi650-202205001.html
Disclosure Timeline
- 2022-01-12 - Vulnerability reported to vendor
- 2022-07-28 - Coordinated public release of advisory
- 2022-07-28 - Advisory Updated
Credit
Reno Robert of Trend Micro Zero Day Initiative
